Senior Consultant – Strategy & Risk

Optiv

. Support clients in assessing risks associated with artificial intelligence and develop governance and risk mitigation recommendations .

Posted 11/4/2026full-timeRemote • United StatesSeniorWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in developing and implementing cybersecurity and governance, risk, and compliance (GRC) strategies, with a strong focus on AI governance and risk assessments. Capable of leading complex projects, conducting risk assessments, and advising senior executives on cybersecurity frameworks and compliance standards.

Highest-signal resume keywords

Cybersecurity Strategy DevelopmentGovernance, Risk, And Compliance (GRC) ProgramsRisk Assessment And ManagementAI Governance And Risk AssessmentsCybersecurity Frameworks (NIST, ISO 27001, CMMC)

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Risk Management FrameworksCyber Asset IntelligenceAttack Surface ManagementSecurity AssessmentsCompliance AssessmentsBusiness Continuity PlanningDisaster RecoveryOperational ResilienceControl MappingEvidence Collection

Soft Skills

Analytical SkillsProblem-Solving SkillsCommunication SkillsReport Writing SkillsProject Management

Tools & Technologies

GRC PlatformsCybersecurity ToolsRisk Management ToolsCompliance Tools

Certifications & Qualifications

CISSPCISMCRISCCCSPCMMC CCP/CCAISO 27001 Lead Implementer

Industry Keywords

CybersecurityGovernanceRisk ManagementComplianceAI Risk AssessmentsInsider Risk ProgramsSecurity PoliciesRegulatory FrameworksStakeholder EngagementThought Leadership

Tech Stack

Tools & technologies

Cyber Security

About the role

Key responsibilities & impact

Support clients in assessing risks associated with artificial intelligence and develop governance and risk mitigation recommendations
Assist clients in developing AI governance policies, acceptable-use standards, oversight processes, and controls
Strengthen governance, risk, and compliance processes, including risk registers, control mapping, evidence collection, issue management, and remediation tracking
Lead strategic cybersecurity advisory engagements and develop cybersecurity and GRC strategies, transformation roadmaps, and investment plans
Advise clients on enterprise cybersecurity and GRC programs, governance structures, risk frameworks, controls, policies, metrics, and executive reporting
Design and mature insider risk programs across cybersecurity, identity, data protection, HR, Legal, Privacy, and Compliance stakeholders
Assess and develop cyber asset intelligence and attack surface management programs
Develop executive-level cybersecurity strategies and business cases
Lead complex projects and act as an engagement escalation point
Conduct risk assessments, security readiness audits, and gap analyses
Assess compliance with industry standards and regulatory frameworks
Develop risk management frameworks, mitigation strategies, security program plans, and POA&Ms
Provide third-party risk assessments of supply chains and key vendors
Conduct workshops, stakeholder interviews, security awareness sessions, and presentations
Maintain documentation and reporting for security findings and recommendations
Stay current on emerging cybersecurity, risk management, technologies, and regulations
Contribute to thought leadership through research, whitepapers, and presentations
Provide knowledge transfer and post-production support

Requirements

What you’ll need

Bachelor's degree and approximately 5-7 years of related work experience, preferably in a prior consultancy role
Experience leading cybersecurity strategy and transformation engagements
Experience designing, implementing, or maturing enterprise cybersecurity and GRC programs
Experience assessing or developing insider risk programs
Experience developing cyber asset intelligence, asset management, or attack surface management capabilities
Ability to advise senior executives and cybersecurity leaders and facilitate strategic workshops
Experience supporting AI governance, AI risk assessments, or evaluation of enterprise AI risks
Experience translating GRC assessment findings into remediation roadmaps and recommendations
Familiarity with GRC platforms and tools; hands-on experience preferred
Hold or pursue relevant certifications such as CISSP, CISM, CRISC, CCSP, CMMC CCP/CCA, or ISO 27001 Lead Implementer
Strong understanding of cybersecurity frameworks including NIST, ISO 27001, CMMC, CIS, PCI, and HIPAA
Hands-on experience with security assessments, risk management, compliance assessments, policies, and standards
Experience with cyber resilience, Business Continuity Planning, Disaster Recovery, Business Impact Analysis, and Operational Resilience
Strong analytical and problem-solving skills
Excellent communication and report writing skills
Ability to manage multiple projects and work independently
Willingness to travel to meet client needs
Valid driver's license in the US
Must hold related professional certifications such as CISSP, CISM, and/or CISA

Benefits

Comp & perks

Work/life balance
Professional training resources
Creative problem-solving and the ability to tackle unique, complex projects
Volunteer Opportunities through “Optiv Chips In”
The ability and technology necessary to productively work remotely/from home (where applicable)
Inclusive Employee Resource Groups